Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/6c52f4fe-621b-3514-b04d-4fb69cbd1a70.roa
File:                     6c52f4fe-621b-3514-b04d-4fb69cbd1a70.roa (raw, json)
Hash identifier:          CTW+xMUvyYtCbwrhBKswI5XHR/aybTbKMfBFZQCeyOw=
Subject key identifier:   8D:02:EB:50:22:F1:71:28:E1:38:43:F1:08:CE:55:CA:DC:C9:BD:4E
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F43285849192D19B2C3A4E6EF0D770E00
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/6c52f4fe-621b-3514-b04d-4fb69cbd1a70.roa
Signing time:             Thu 06 Mar 2025 13:19:54 +0000
ROA not before:           Thu 06 Mar 2025 13:19:54 +0000
ROA not after:            Wed 04 Jun 2025 12:19:54 +0000
asID:                     207266
IP address blocks:        65.22.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 16 Mar 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:19:2d:19:b2:c3:a4:e6:ef:0d:77:0e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Mar  6 13:19:54 2025 GMT
            Not After : Jun  4 12:19:54 2025 GMT
        Subject: CN=8c05693f-e1a9-4db0-b0a0-756f832ce1c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:5e:4f:1b:3e:12:d0:45:98:b2:1f:f5:c6:89:
                    fb:31:f0:d4:8e:f9:44:53:f3:d9:c8:33:59:4d:0e:
                    c2:5b:60:c9:6e:2c:7a:67:73:ac:d9:6b:7f:4f:44:
                    a8:f8:aa:01:4a:14:e3:54:ba:78:ec:86:f8:8d:50:
                    c6:6c:db:e7:e2:d9:58:0c:08:cd:b9:db:0c:cc:4d:
                    ff:09:78:43:55:dc:68:a4:80:37:36:1c:22:40:3f:
                    5f:7d:48:1b:9c:ea:68:8f:95:9f:9b:44:2d:ff:c8:
                    b3:a4:6e:86:ef:0f:72:c3:23:c4:0e:46:2a:55:a6:
                    1c:30:58:dd:59:a3:dc:9c:82:e8:9e:8e:15:6d:c3:
                    48:6c:99:0e:eb:73:5f:36:9d:f0:7f:b4:8d:22:23:
                    9f:1b:84:ae:29:fd:60:58:1b:86:5d:11:19:31:03:
                    1b:b8:f7:4d:7b:0f:cb:3a:bd:8c:46:c9:44:c3:7e:
                    2e:ee:00:58:b6:b4:55:15:bf:a3:9b:ad:07:1f:2b:
                    a5:65:90:cf:53:26:63:d5:49:19:43:ed:78:fc:ae:
                    7c:06:40:88:60:f3:e6:cd:23:bf:06:ae:b0:ab:bd:
                    64:4b:44:39:e3:ed:56:b5:0c:c8:bb:cf:63:a6:89:
                    76:95:de:d6:a0:a5:18:8f:b7:2c:ee:35:14:de:3f:
                    12:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:02:EB:50:22:F1:71:28:E1:38:43:F1:08:CE:55:CA:DC:C9:BD:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/6c52f4fe-621b-3514-b04d-4fb69cbd1a70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.119.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:55:ed:b3:0f:23:f2:42:d6:ca:8d:b8:a9:c5:df:76:e8:18:
         aa:7e:20:8c:a6:ff:9b:66:95:24:53:b2:06:48:e0:99:dd:55:
         35:ad:a9:cd:90:5f:73:41:08:e0:e2:41:cc:3a:1b:13:58:dd:
         04:02:c9:c2:82:0a:df:9b:48:3a:37:a6:16:5a:d1:bc:ca:8b:
         3b:86:4c:57:1b:ea:17:a9:43:f2:c2:56:40:8f:18:02:59:0a:
         c8:41:7c:6c:43:e7:9e:ec:75:48:9b:be:3f:ea:1b:bb:4f:6e:
         13:4c:0f:6a:16:d0:26:79:ce:a4:6b:a6:5a:d4:7c:87:00:81:
         79:b7:3e:c3:ed:b1:f3:a1:8e:e9:c4:d3:38:a7:4d:df:dc:40:
         ae:73:90:31:35:2c:63:c4:e3:9b:ed:7a:f7:cd:27:b2:7a:80:
         c6:64:24:0e:c2:f3:91:7f:eb:9d:e5:38:aa:12:ed:76:f7:ac:
         54:48:42:cd:d5:0f:b8:48:86:ec:b3:cc:45:32:31:eb:18:2e:
         a6:72:24:58:50:f0:f5:7e:ee:c4:55:76:2d:74:07:8a:c6:be:
         73:0d:de:1a:2f:9d:57:3a:66:18:00:2c:cb:90:3f:6b:0a:ca:
         f3:25:39:d9:92:a1:f2:b3:8b:a8:a7:6f:79:1f:2f:05:20:12:
         a2:4a:a6:e4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkZLRmyw6Tm7w13DgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0
MDlhMB4XDTI1MDMwNjEzMTk1NFoXDTI1MDYwNDEyMTk1NFowLzEtMCsGA1UEAxMk
OGMwNTY5M2YtZTFhOS00ZGIwLWIwYTAtNzU2ZjgzMmNlMWM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2l5PGz4S0EWYsh/1xon7MfDUjvlEU/PZyDNZ
TQ7CW2DJbix6Z3Os2Wt/T0So+KoBShTjVLp47Ib4jVDGbNvn4tlYDAjNudsMzE3/
CXhDVdxopIA3NhwiQD9ffUgbnOpoj5Wfm0Qt/8izpG6G7w9ywyPEDkYqVaYcMFjd
WaPcnILono4VbcNIbJkO63NfNp3wf7SNIiOfG4SuKf1gWBuGXREZMQMbuPdNew/L
Or2MRslEw34u7gBYtrRVFb+jm60HHyulZZDPUyZj1UkZQ+14/K58BkCIYPPmzSO/
Bq6wq71kS0Q54+1WtQzIu89jpol2ld7WoKUYj7cs7jUU3j8SUQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI0C61Ai8XEo4ThD8QjOVcrcyb1OMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm
YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNmM1MmY0ZmUtNjIxYi0z
NTE0LWIwNGQtNGZiNjljYmQxYTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm
YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw
NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx
NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZ3MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADpV7bMPI/JC1sqNuKnF33boGKp+IIym/5tmlSRTsgZI4JndVTWtqc2Q
X3NBCODiQcw6GxNY3QQCycKCCt+bSDo3phZa0bzKizuGTFcb6hepQ/LCVkCPGAJZ
CshBfGxD557sdUibvj/qG7tPbhNMD2oW0CZ5zqRrplrUfIcAgXm3PsPtsfOhjunE
0zinTd/cQK5zkDE1LGPE45vtevfNJ7J6gMZkJA7C85F/653lOKoS7Xb3rFRIQs3V
D7hIhuyzzEUyMesYLqZyJFhQ8PV+7sRVdi10B4rGvnMN3hovnVc6ZhgALMuQP2sK
yvMlOdmSofKzi6inb3kfLwUgEqJKpuQ=
-----END CERTIFICATE-----
Generated at Sat Mar 15 06:16:11 2025 by rpki-client